Data Processing Addendum (stub)

Last updated: 2026-05-17.

This stub exists to ease enterprise procurement conversations. It is not legal advice. The horizontal demo processes Personal Data only incidentally (email + prompt contents); the vertical product ships with a counter-signed DPA, SOC 2 attestation, and a sub-processor list.

Sub-processors (current)

• Anthropic, PBC — LLM inference.
• Supabase, Inc. — auth + Postgres hosting.
• Cloudflare, Inc. — R2 object storage.
• Vercel, Inc. — frontend hosting.
• Microsoft Corporation — Azure VM for the backend.

Contact

Procurement / DPA requests: craviott@usc.edu.